Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
File:                     b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa (raw, json)
Hash identifier:          XIEFc6p/nqZmCNwYoEw/MjkTQiqx2Xsic7lff8FVmKI=
Subject key identifier:   DA:82:0A:37:1A:AB:2B:42:23:A9:B3:E3:10:1E:A4:B3:79:C6:39:90
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F432858485F9AE47847C38F2FB13A3A2C
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     6250
IP address blocks:        216.163.120.0/23 maxlen: 24
                          216.163.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e4:78:47:c3:8f:2f:b1:3a:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=4a260655-988a-4b42-b300-40a3e5488c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:fb:01:c9:b4:f3:67:e4:d9:5d:89:b5:a1:
                    c4:8a:49:41:67:26:4d:af:d5:92:32:87:44:5e:2a:
                    a0:67:f8:17:1a:39:7d:38:82:6c:6a:41:28:f3:c8:
                    3d:c6:db:9e:d0:14:34:30:7a:fd:5d:81:b5:de:59:
                    6d:12:4d:77:38:da:96:82:37:da:61:b9:ce:e5:6d:
                    c7:96:90:10:4f:90:a9:e0:17:f6:ce:10:9d:b2:2c:
                    13:b1:71:0f:ec:8e:3d:00:37:59:44:14:02:56:b9:
                    28:97:f9:7b:fc:32:7a:30:dd:4e:3e:9f:f4:89:7d:
                    41:36:36:cd:32:a3:57:72:7a:e7:ba:07:5c:6e:28:
                    00:ad:49:76:fa:be:a7:74:e8:0d:97:db:54:cd:66:
                    dd:8c:94:8c:a9:83:8a:fa:d3:aa:ce:15:11:b8:36:
                    97:00:ef:5b:ee:10:75:df:05:e6:19:2b:ff:e7:e5:
                    df:e5:91:97:3c:b5:64:9f:87:8e:74:11:6c:e7:a5:
                    ee:4b:83:f2:6c:be:67:e4:6a:a3:bb:06:05:f0:04:
                    7a:47:e3:92:78:5c:67:31:89:2f:73:68:79:44:15:
                    db:6c:54:2a:96:9e:1a:85:ee:d7:a9:e6:d2:f6:aa:
                    fa:0d:6b:ee:6e:bf:09:63:14:07:90:08:5c:c5:f4:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:82:0A:37:1A:AB:2B:42:23:A9:B3:E3:10:1E:A4:B3:79:C6:39:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:be:a7:e4:92:b3:27:d0:3e:65:2d:e9:c3:3f:95:60:0a:96:
         7b:11:ec:ee:5d:0c:d6:61:5a:ea:47:51:b4:2a:88:ef:06:d3:
         6d:9c:47:41:36:ec:d0:ee:cf:f5:6a:c9:96:a7:a5:b8:40:0f:
         1f:03:de:e6:8a:95:25:ca:f4:f7:93:72:a5:74:a2:0b:37:b9:
         00:d9:65:d7:07:a3:56:f1:01:3c:f9:69:3f:36:ac:34:bc:26:
         c7:4a:4e:4e:2b:6b:e1:71:8a:71:60:1b:14:69:9e:41:b7:12:
         2a:89:ab:81:a7:d1:ac:4f:f6:42:b7:f3:a1:91:fc:1e:d4:e2:
         41:a8:ff:2e:1d:e7:9a:03:a1:d5:2e:d7:db:6e:60:9f:14:03:
         49:11:2d:a7:88:b3:3d:9b:67:93:89:be:0e:7f:8e:f4:2d:5a:
         6e:c9:d8:ce:70:9f:5e:37:8f:1d:eb:87:a6:ac:e3:5d:d3:b6:
         9a:e6:2c:f6:02:56:0b:d3:94:72:fd:6b:5d:2a:f1:87:bd:c9:
         58:83:c9:97:29:3d:d0:69:54:22:6a:4b:c5:a0:27:07:55:fa:
         41:c1:85:ef:7f:6b:11:f8:8c:06:40:a7:76:1e:b9:ac:58:a3:
         22:60:1d:45:d2:08:20:50:bc:49:a0:71:eb:37:78:92:7b:fa:
         7b:ad:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:08 2025 by rpki-client